Skip to content
OpenAdvisories
High ALAS2023-2026-1799 1 CVE

Important: radvd security update (Amazon Linux 2023)

Published Jun 8, 2026 · Updated Jun 8, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-48715: Stack Buffer Overflow in radvdump Route Information Option Parser NOTE: https://github.com/radvd-project/radvd/security/advisories/GHSA-52px-gh9p-m379

Fixed packages 3

ReleasePackageFixed in
Amazon Linux · 2023 radvd 0:2.19-2.amzn2023.0.3
Amazon Linux · 2023 radvd-debuginfo 0:2.19-2.amzn2023.0.3
Amazon Linux · 2023 radvd-debugsource 0:2.19-2.amzn2023.0.3

Vulnerabilities 1

  • High 7.7
    CVE-2026-48715

    radvdump's Route Information Option Parser has a Stack Buffer Overflow

    radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the `radvdump` utility shipped with radvd contains a stack buffer overflow in the Route Information option parser. When processing a crafted ICMPv6 Router Advertisement, `print_ff()` copi…

    radvd-project radvdump radvd radvd Debian Ubuntu Azure Linux Alpine

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-48715.html